I was wondering whether the following attack vector is possible in practice.

There's a batch transfer function that is intended to batch transfer the tokens owned by the contract. That function distributes the tokens according to a particular order and checkpoints the user balance data too.

What if one of the tokens in the middle is a malicious ERC777 ERC20-like token? And the hooks it calls on transfer are exploited by the receiver in a way that somehow spends all the available gas.

Will that cause a denial of service?

Apologies for being pretty vague. Hopefully, you get what I mean in my question.


Your Answer

By clicking “Post Your Answer”, you agree to our terms of service and acknowledge you have read our privacy policy.